Known vulnerabilities in IBM OpenPages with Watson - page 3

Vendor: IBM Corporation
Software: IBM OpenPages with Watson
Software CPE: cpe:2.3:a:ibm_corporation:ibm_openpages_with_watson:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 267
Public exploits: 12
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM OpenPages with Watson IBM OpenPages with Watson is affected by 267 known vulnerabilities: 35 high, 148 medium, 84 low Critical High Medium Low

Vulnerabilities (267)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123159 - Incorrect Calculation of Buffer Size
CVE-2026-1188		 CWE-131 High
No
No
 - 24.02.2026 SB2026022412
SB2026022413
SB2026022531
and 46 more
#VU122748 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-14914		 CWE-22 Low
No
No
 - 12.02.2026 SB2026021209
SB2026021210
SB2026021212
and 23 more
#VU121727 - Improper input validation
CVE-2026-21945		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121728 - Improper input validation
CVE-2026-21932		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 77 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 90 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 - 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 92 more
#VU119901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12635		 CWE-79 Medium
No
No
 - 12.12.2025 SB2025121283
SB2025121517
SB2025121518
and 42 more
#VU119149 - Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
CVE-2025-58098		 CWE-97 Low
Available
No
 9.0.5.26 04.12.2025 SB2025120441
SB2025121923
SB2025121940
and 47 more
#VU119148 - Server-Side Request Forgery (SSRF)
CVE-2025-59775		 CWE-918 Medium
No
No
 9.0.5.26 04.12.2025 SB2025120441
SB2026010820
SB20260114117
and 11 more
#VU117483 - Improper input validation
CVE-2025-53066		 CWE-20 Medium
No
No
 - 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057		 CWE-20 Medium
No
No
 - 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 9.0.0.5.7, 9.1.2.1 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU115570 - Protection Mechanism Failure
CVE-2025-41248		 CWE-693 Medium
No
No
 9.0.0.5.7, 9.1.2.1 16.09.2025 SB20250916313
SB2025100741
SB20251008143
and 33 more
#VU115568 - Allocation of Resources Without Limits or Throttling
CVE-2025-36047		 CWE-770 Medium
No
No
 - 16.09.2025 SB20250916312
SB20250916316
SB20250916321
and 29 more
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988		 CWE-611 Medium
Available
No
 8.3.0.3.3, 9.0.0.5.7, 9.1.2 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 31 more
#VU114346 - Command injection
CVE-2025-7962		 CWE-77 Medium
No
No
 - 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 54 more
#VU114067 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-41242		 CWE-22 Medium
No
No
 9.0.0.5.7, 9.1.2.1 14.08.2025 SB2025081411
SB2025100743
SB2025110336
and 18 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783		 CWE-330 Medium
Available
No
 8.3.0.3.3, 9.0.0.5.6, 9.1.2 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 62 more
#VU113032 - Uncaught Exception
CVE-2025-7338		 CWE-248 Medium
No
No
 9.0.0.5, 9.1.2 18.07.2025 SB2025071811
SB2025082823
SB2025091818
and 8 more
#VU83992 - Use of Insufficiently Random Values
CVE-2020-36732		 CWE-330 Medium
No
No
 - 08.12.2023 SB2023120804
SB2024030742
SB2025091116
and 26 more


Showing elements 41 - 60 out of 267